
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/cb493953-7d82-3c68-b3d1-fcfb24bc7437.roa
File: cb493953-7d82-3c68-b3d1-fcfb24bc7437.roa (raw, json)
Hash identifier: LV9e+X5yI3QOYFj/81OdDG+HRi+dJ5D6oWiiK6LnuNw=
Subject key identifier: 6D:12:8C:43:68:24:C2:CD:80:C7:1F:ED:1B:EC:B8:AB:9A:16:C4:7E
Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial: 010D0C9F4328584F49748F5131817EF4DC2262C0
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/cb493953-7d82-3c68-b3d1-fcfb24bc7437.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 207266
IP address blocks: 199.249.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:74:8f:51:31:81:7e:f4:dc:22:62:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=b584fc8b-692c-4baa-9b79-1f5d6667e8f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6d:36:18:b6:7b:b9:b9:d1:9f:5b:80:18:56:
8b:d8:93:2a:81:07:ce:61:a6:0d:f1:11:85:43:e6:
c3:c6:24:0b:e2:29:cf:67:1c:8d:af:82:0d:53:59:
08:97:c1:e2:be:1c:c6:47:6e:ff:ad:f4:9b:93:e1:
82:24:a3:bb:3c:5f:f2:f5:1d:aa:5b:e4:64:01:6f:
c0:a6:05:ea:94:2c:b6:07:7a:f0:f6:92:57:f1:66:
8b:0c:a9:b8:68:40:89:ca:2d:8c:ac:25:dc:95:3b:
48:4d:68:b8:34:06:22:d1:16:0d:9c:28:fa:96:49:
f7:ab:d4:83:a7:7f:06:c9:02:69:25:e9:d4:f9:77:
00:4b:79:cd:9e:70:b2:a1:c0:bb:b9:61:1e:7f:29:
bf:3a:8f:fb:f7:11:74:87:57:46:99:4d:13:98:5c:
07:40:f3:36:81:45:43:b3:98:17:86:1d:f9:4a:7f:
13:7c:8a:16:53:6a:74:6c:27:cb:7c:45:b9:8f:64:
90:3d:42:d7:aa:3b:83:23:88:ad:d6:01:1f:5b:25:
57:ef:ba:08:ce:4f:b5:4e:ab:48:56:f9:89:15:2f:
1d:b1:1a:c4:53:f3:11:96:43:63:ee:a0:a5:f4:0f:
66:44:e6:f2:6a:a7:d6:b9:79:af:a9:64:c7:91:73:
a1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:12:8C:43:68:24:C2:CD:80:C7:1F:ED:1B:EC:B8:AB:9A:16:C4:7E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/cb493953-7d82-3c68-b3d1-fcfb24bc7437.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
X509v3 Authority Key Identifier:
keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
sbgp-ipAddrBlock: critical
IPv4:
199.249.127.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:98:4f:60:cb:c7:f2:f7:ae:fd:a0:93:e3:3e:70:18:01:f5:
47:e3:5f:7a:3c:5b:07:71:49:d6:25:84:d8:56:5b:7e:a0:a5:
1f:9e:37:dc:45:5e:33:49:4b:5e:d9:e0:13:a4:9a:7f:01:57:
66:2e:78:31:6b:5c:fd:9f:1a:7b:51:5a:a0:41:ca:18:99:a6:
3b:10:e3:c5:97:16:eb:7b:c6:ae:8a:0a:25:2c:c3:46:c1:ed:
6c:d8:39:95:ba:4f:40:45:e1:93:e2:bb:e1:45:9f:60:f4:f5:
48:7f:3b:64:04:39:f2:24:2c:cd:a6:17:83:cb:e5:c5:bb:71:
15:b5:fd:b2:1e:34:4c:5d:f7:ce:04:2c:b9:6a:dd:30:60:d0:
e4:48:a0:ec:f9:24:ee:65:20:e6:6b:c0:c4:fc:e1:bb:d3:62:
98:6d:61:d8:13:3d:28:56:e0:84:fa:89:9f:fe:61:e1:82:08:
b8:93:ae:f3:a7:74:1c:fd:c2:32:37:06:c4:a0:22:19:de:90:
04:45:9a:73:bb:4b:dd:ff:d6:44:0d:28:9f:24:d9:94:59:4f:
87:a6:9c:ba:e8:a4:21:7f:d7:3b:bb:65:f4:46:98:82:ce:eb:
4c:b1:98:7b:54:fe:6c:fa:c7:51:e4:3f:9a:da:b8:14:84:f9:
43:f9:01:3c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdI9RMYF+9NwiYsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0
MDlhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
YjU4NGZjOGItNjkyYy00YmFhLTliNzktMWY1ZDY2NjdlOGY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn202GLZ7ubnRn1uAGFaL2JMqgQfOYaYN8RGF
Q+bDxiQL4inPZxyNr4INU1kIl8HivhzGR27/rfSbk+GCJKO7PF/y9R2qW+RkAW/A
pgXqlCy2B3rw9pJX8WaLDKm4aECJyi2MrCXclTtITWi4NAYi0RYNnCj6lkn3q9SD
p38GyQJpJenU+XcAS3nNnnCyocC7uWEefym/Oo/79xF0h1dGmU0TmFwHQPM2gUVD
s5gXhh35Sn8TfIoWU2p0bCfLfEW5j2SQPULXqjuDI4it1gEfWyVX77oIzk+1TqtI
VvmJFS8dsRrEU/MRlkNj7qCl9A9mRObyaqfWuXmvqWTHkXOhYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG0SjENoJMLNgMcf7RvsuKuaFsR+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm
YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvY2I0OTM5NTMtN2Q4Mi0z
YzY4LWIzZDEtZmNmYjI0YmM3NDM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm
YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw
NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx
NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/l/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFWYT2DLx/L3rv2gk+M+cBgB9UfjX3o8WwdxSdYlhNhWW36gpR+eN9xF
XjNJS17Z4BOkmn8BV2YueDFrXP2fGntRWqBByhiZpjsQ48WXFut7xq6KCiUsw0bB
7WzYOZW6T0BF4ZPiu+FFn2D09Uh/O2QEOfIkLM2mF4PL5cW7cRW1/bIeNExd984E
LLlq3TBg0ORIoOz5JO5lIOZrwMT84bvTYphtYdgTPShW4IT6iZ/+YeGCCLiTrvOn
dBz9wjI3BsSgIhnekARFmnO7S93/1kQNKJ8k2ZRZT4emnLropCF/1zu7ZfRGmILO
60yxmHtU/mz6x1HkP5rauBSE+UP5ATw=
-----END CERTIFICATE-----
Generated at Sat Sep 26 10:24:51 2026 by rpki-client